Product Security Engineer

Job not on LinkedIn

🔥 0 minutes ago

🇮🇱 Israel – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Silverfort

WebsiteLinkedInAll Job Openings

201 - 500 employees

🔒 Cybersecurity

🤝 B2B

Cybersecurity • B2B

Silverfort is the Unified Identity Protection company that pioneered the first and only platform for modern identity security across all environments. By integrating different segments of the enterprise identity infrastructure, Silverfort offers a vendor-agnostic approach to cybersecurity that simplifies identity protection. The platform secures not only conventional resources but also legacy systems and non-human identities, positioning Silverfort as a leader in the Zero Trust approach to cybersecurity. The company is recognized as a Top Tier Microsoft partner and has earned accolades like Microsoft's Zero Trust Champion of the Year, serving a clientele that includes many Fortune 50 companies.

📋 Description

• Lead threat modeling across products, features, and architecture changes • Translate threat-modeling findings into actionable security requirements • Own product security tooling end-to-end, including SAST, DAST, SCA, and secrets scanning • Select, integrate, tune, triage, and remediate product security tooling findings • Conduct hands-on security code and design reviews to identify vulnerabilities before release • Partner with R&D to secure new AI/ML features, including prompt injection, data exposure, and model misuse • Build security guardrails and secure coding guidelines for R&D teams • Own vulnerability intake and CVE handling, including responsible disclosure, triage, remediation, and CVE issuance • Coordinate external penetration tests through to closure • Launch and operate the bug bounty program, including platform selection, scope, rewards, and researcher relationships • Drive supply-chain and CI/CD security, including pipeline hardening, secrets management, SBOM generation, and dependency risk

🎯 Requirements

• 5+ years of hands-on experience in application or product security at a software company or security vendor • Deep knowledge of OWASP Top 10 and web, API, and cloud vulnerability classes • Cryptography fundamentals, including key management, TLS, and hashing • Ability to validate vulnerabilities in real code • Hands-on experience with SAST tools such as Semgrep or Checkmarx • Hands-on experience with DAST tools such as Burp Suite or OWASP ZAP • Hands-on experience with SCA tools such as Snyk, Dependabot, or Black Duck • Practical threat modeling experience with a track record of making it useful for engineering teams • Strong understanding of OAuth 2.0, OIDC, SAML, and JWT and their security implications • Cloud-native security experience across AWS or Azure, including workloads, containers, serverless, and Terraform IaC • CI/CD pipeline security experience, including security gates and secrets management with Vault, AWS Secrets Manager, or similar • Python or Bash scripting for building security tooling and automating findings workflows • Hands-on use of AI coding and reasoning tools such as Claude, ChatGPT, Copilot, or Cursor in real production work • Clear communication and ability to drive remediation across engineering teams • CVE research, bug bounty hunting, or responsible disclosure track record (advantage) • Offensive security background, OSCP, CTF experience, or penetration testing certifications (advantage) • Depth in identity protocols, token flows, delegated trust patterns, and identity-related attack vectors (advantage) • Experience securing AI/ML features or pipelines (advantage)

🏖️ Benefits

• Fast-moving team culture of innovation and collaboration • Opportunity to help reshape the future of identity security • Opportunity to work on AI/ML security, cloud-native security, and product security programs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume